Skip to content
Sign in
3.6 Low

CVE-2019-3884 A vulnerability exists in the garbage collection mechanism of atomic-openshift

Description

A vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able spoof the UUID of a valid object from another namespace is able to delete children of those objects. Versions 3.6, 3.7, 3.8, 3.9, 3.10, 3.11 and 4.1 are affected.

Affected products and versions

Product Affected versions Fixed in
atomic-openshift Versions not published

Other CVEs of atomic-openshift

The 3 CVEs of atomic-openshift →
CVE-2019-3889 A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3,… 4.6 Medium CVE-2018-14632 An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift… 7.7 High
Track this CVE